Deployed application status

Created this dashboard to see when or if an application was deployed successfully. Close to splunkninja’s query, this will also show if the host in question also restarted to apply the new app.

 

Share This:

Comments

  1. Drew

    Like it a lot, but quick question. There are duplicated applications in the app picker, with a ‘.’ at the end of one. eg.

    Splunk_TA_windows
    Splunk_TA_windows.

    This seems to be the default results when just looking at the ‘app’ field after running the basic query index=_internal sourcetype=splunkd component=DeployedApplication

    Can these be excluded from the search or are they needed app!=”*.” ? They do show slightly different results/percentages int he app field.

    1. manderso

      Yeah, I didn’t try to exclude them, as they gave slightly different results than the apps w/out the “.”. Let me know how it works for you if you exclude them.

Leave A Comment?